@4players/odin-plugin-web 1.15.3 → 1.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -28,3 +28,22 @@ Don’t use Discord or Twitter? Send us an [email](mailto:odin@4players.io) and
28
28
 
29
29
  [npm-badge-url]: https://www.npmjs.com/package/@4players/odin-plugin-web
30
30
  [license-url]: https://github.com/4Players/odin-sdk-web/blob/master/LICENSE
31
+
32
+ ## Dependency maintenance
33
+
34
+ Use npm 12 or newer when updating dependencies so both the ten-day release
35
+ age and the `@4players/*` exception are enforced. Check `npm --version` and
36
+ `npm config get min-release-age` before installing. Keep registry credentials
37
+ in your user configuration or CI secrets, outside tracked policy files.
38
+
39
+ Select stable releases at least ten days old, including transitive dependencies.
40
+ First-party `@4players/*` packages are exempt; their third-party dependencies
41
+ are not. Keep TypeScript on 6.x and align shared versions across the ODIN
42
+ repositories where peer requirements permit. Preserve and review lockfiles;
43
+ existing locked versions are not evidence of release-age eligibility.
44
+
45
+ Install with `npm install --min-release-age=10 --min-release-age-exclude='@4players/*'`.
46
+ Use `npm ci` for reproducible installs from the reviewed lockfile.
47
+
48
+ Each independently installed example or test application carries its own
49
+ `.npmrc`, because npm project configuration is local to the installation root.